3RECONNAISSANCE

image

In this chapter, I show you how to search subscriptions for useful data, such as what storage accounts it uses, its SQL databases, the virtual machines it contains, and any network firewalls in place.

Like other large cloud service providers, Azure offers a growing list of services, ranging from web hosting to databases, secret key storage, and machine learning. With so many offerings, it can be hard to determine which services and features a given customer is taking advantage of, and if any of them are configured in a vulnerable way.

In this chapter, I will demonstrate how Azure’s PowerShell cmdlets and command line tools can ...

Get Pentesting Azure Applications now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.